$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa File: 3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa (raw, json) Hash identifier: MqGEt8iaek2/mHQa0SpXh1zn9aSvERLNt8awpEx3nHE= Subject key identifier: AC:F0:00:CA:58:81:B7:73:E9:5C:B4:08:49:40:F6:CE:8E:DC:D0:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DCDC5BD573DB6C883232A3080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.54.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:bd:57:3d:b6:c8:83:23:2a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=68973741-795c-4f33-8015-fd80580fb232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:e9:cb:e0:cf:92:25:50:26:06:a1:47:e3: 01:3a:a7:d9:ad:4a:54:d1:db:96:9e:e9:3f:43:75: 85:e2:ff:91:0d:cb:38:21:a6:0e:83:38:6c:72:17: 9f:84:c6:05:7f:47:44:c7:1d:d0:cc:f6:07:da:8b: 59:77:c7:f6:14:6c:96:20:c0:24:df:b9:fe:9d:49: 8e:09:58:6a:27:ca:bb:47:7a:3c:dd:39:d8:e2:0c: 68:37:a6:c4:2d:4d:d2:2c:c9:ef:58:6a:76:25:da: 54:93:99:1d:6a:4b:b9:a9:4d:8e:bc:67:e2:f4:f9: 2e:51:8b:24:40:f3:09:53:63:68:66:29:ed:9f:5d: bb:d1:58:16:d6:6b:a1:1a:3b:00:3c:73:86:57:56: cb:2c:2a:76:b6:35:a2:9f:2a:8f:0a:01:87:ed:06: 26:91:57:33:8e:cd:86:93:ef:90:4f:48:04:2f:91: 92:b0:3b:c9:50:90:c2:82:f3:55:c6:f4:b1:0c:95: 20:6c:02:57:32:f6:ec:f7:56:71:0a:20:80:e1:39: 65:34:0f:2b:a8:e5:b5:91:9e:df:36:c9:b0:52:a3: 03:f3:00:a0:99:53:ab:5e:80:fb:af:c8:58:7a:05: 75:1b:4f:5d:ef:63:35:5a:90:8c:6b:37:04:eb:1f: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F0:00:CA:58:81:B7:73:E9:5C:B4:08:49:40:F6:CE:8E:DC:D0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ec:3e:4c:d4:ac:3e:5e:56:7c:c5:43:6d:3a:ef:35:a2:1d: c5:18:e3:e4:77:04:a3:b8:6b:c6:bf:3d:79:d5:a9:e7:4b:1d: 3a:f5:66:7a:9a:37:b2:30:be:5d:f0:80:7c:27:82:4c:d8:ba: 3c:03:30:49:c0:fc:e5:72:85:6c:40:a5:84:52:25:60:ba:84: d7:43:7c:73:db:a6:ea:5e:4d:f0:47:4c:38:33:a0:ce:70:b5: dc:20:dd:3d:8e:d4:ce:cf:7e:76:0b:1e:37:43:5f:76:e0:dd: 49:be:39:6e:39:7e:36:d8:cb:d3:e9:1d:88:5b:d6:6c:e5:35: b9:f4:ba:1a:88:1b:9b:fc:94:e1:33:ef:06:09:18:bd:1f:cd: 75:a0:a8:e9:c9:51:a7:0a:36:7d:8b:14:fd:6e:4c:14:e4:38: 55:7b:f0:74:2e:c6:a4:e3:72:74:3f:74:f5:84:45:90:32:67: 8f:c9:35:ed:da:2e:af:b3:7e:9a:54:d0:38:b2:b6:05:06:0e: d1:80:2f:60:58:52:d3:cb:0b:e0:38:d4:1a:91:14:ea:65:8e: 88:d1:09:6c:b1:08:92:64:d8:33:7d:ff:9c:19:d8:40:8b:a7: 1f:7c:e5:d7:65:8b:94:2a:0c:bb:5c:dc:31:15:85:a6:e2:0c: de:60:af:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxb1XPbbIgyMqMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk Njg5NzM3NDEtNzk1Yy00ZjMzLTgwMTUtZmQ4MDU4MGZiMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiDpy+DPkiVQJgahR+MBOqfZrUpU0duWnuk/ Q3WF4v+RDcs4IaYOgzhschefhMYFf0dExx3QzPYH2otZd8f2FGyWIMAk37n+nUmO CVhqJ8q7R3o83TnY4gxoN6bELU3SLMnvWGp2JdpUk5kdaku5qU2OvGfi9PkuUYsk QPMJU2NoZintn1270VgW1muhGjsAPHOGV1bLLCp2tjWinyqPCgGH7QYmkVczjs2G k++QT0gEL5GSsDvJUJDCgvNVxvSxDJUgbAJXMvbs91ZxCiCA4TllNA8rqOW1kZ7f NsmwUqMD8wCgmVOrXoD7r8hYegV1G09d72M1WpCMazcE6x+nZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzwAMpYgbdz6Vy0CElA9s6O3NCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0MmM3YjEtNjViOS0z Y2ZhLWFmOGYtNjc5MTA4MDFmNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDsPkzUrD5eVnzFQ2067zWiHcUY4+R3BKO4a8a/PXnVqedLHTr1Znqa N7Iwvl3wgHwngkzYujwDMEnA/OVyhWxApYRSJWC6hNdDfHPbpupeTfBHTDgzoM5w tdwg3T2O1M7PfnYLHjdDX3bg3Um+OW45fjbYy9PpHYhb1mzlNbn0uhqIG5v8lOEz 7wYJGL0fzXWgqOnJUacKNn2LFP1uTBTkOFV78HQuxqTjcnQ/dPWERZAyZ4/JNe3a Lq+zfppU0DiytgUGDtGAL2BYUtPLC+A41BqRFOpljojRCWyxCJJk2DN9/5wZ2ECL px985ddli5QqDLtc3DEVhabiDN5gr80= -----END CERTIFICATE-----Generated at Wed May 13 08:11:25 2026 by rpki-client